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DESCRIPTION OF 1>RAW[NCS - The figure shows the block diagram of user 
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00 J438 J 214 & & Dmmng matlabte 
WPi Ace no; 2004-570263/200455 
Related WPt Aec No: 2004-255856 
XRPX Acc No; N2004-45J029 

Authorised person idem try in g apparatus for instrument e.g. electronic financial 
account system, has personalized authenticated controller unit with communication unit 
for authenticating identity of -person to perform action 
Patent Assignee: N ORRIS O B (NORR-I) 
Inventor; NORRIS C B 
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Filing Notes 


US 200401 3934% 


Al 


EN 


32 


21 


Continuation of application 


US 20O049HJ4O 












Continuation of patent 


US 6695207 



Original Titles.; System for secure, identity authenticated, and immediate financial 
transactions as well as activation of varied instrumentalities— —System for secure, identity 
authenticated, and immediate financial transact tons as well as activation of varied: 
instrumentalities. Original Publication l>alaby Authority ...Original Abstracts; the customers 
PAC to establish positive personal identification and optionally charge purchases or transfer 
funds. Various security features are incorporated to ensure authentication of the customer 
and Integrity of the transaction. One security feature is thai an user-worn PAC Immediately 
senses removal from an authorized person's body, which cancels authentication... .... the 
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customer's IMC to establish positive personal identification and optionally charge purchases 
or transfer funds. Various security features are incorporated to ensure authentication of the 
customer and integrity of the transaction. One security feature is that an user-worn PAC 
iiitmcdtatcly senses removal front an authorised person's body, which cancels authentication 
aiui also renders the PAC itself useless if sfs>ieru. + 

13/3,K/2 (Item 2 from file: 350) Links 
Fulltext available through: Order File History 
Derwent WPIX 

(c) 2008 The Thomson Corporation. All rights reserved. 

0014372014 & & Drawing available 
WPI Acc no: 2004-560860/200454 
XRPX Acc No: N2004-443779 

Currency dispense and control system for merchants, has control system with user 

authentication system comparing personal identification code with master list, and 

report-generating system printing dispenses of on-site currency 

Patent Assignee: BOSCH J H (BOSC-I); BOSCH S H (BOSC-I); PEREGRIN 

TECHNOLOGIES INC (PERE-N) 

Inventor: BOSCH J H; BOSCH S H 
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Alerting Abstract ...USE - Used by merchants for performing both traditional automated 
teller machine (ATM) transactions and merchant-initiated currency control transactions. 
Original Publication Data by Authority.. .Original Abstracts:merchant-approved employee 
to withdraw cash from the CDCS 10 independent of a standard ATM electronic fund 
transfer (EFT) network. The CDCS may also include the following functionalities: a duress 
dispensation system that allows the CDCS 10 to activate an alarm and/or otherwise 
communicate with local police or security services during a robbery, a time-release system 
that effects a time-delayed dispensation functionality, and a user identification and 
authentication system for authenticating a user identity and determining eligibility of the 
user to access the... 

13/3.K/3 (Item 3 from file: 350) Links 
Fulltext available through: Order File History 
Derwent WPIX 

(c) 2008 The Thomson Corporation. All rights reserved. 

0014202931 & & Drawing available 
WPI Acc no: 2004-388536/200436 

Related WPI Acc No: 2004-031027; 2004-224811; 2004-225631; 2004-388535; 2004- 

388537; 2004-388538 

XRPX Acc No: N2004-309335 

Remote monitoring of premises of building, involves activating a signal at the premises 
in order to notify the occupant of premises that remote monitoring is occurring 
Patent Assignee: FELDKAMP G E (FELD-I); GLASGOW W P (GLAS-I); NAIDOO S N 
(NAID-I); ©SECURITY BROADBAND CORP (SECU-N) 
Inventor: FELDKAMP G E; GLASGOW W P; NAIDOO S N 
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Alerting Abstract ... ADVANTAGE - Provides security of the premises, and can address 
privacy concerns of occupants. Allows users of security system to conveniently access the 
system remotely. Improves convenience of communication between remote user and 
premises, thus allowing the owner of the premises... Original Publication Data by 
Authority.. .Original Abstracts:of a premises, comprising the steps of operatively coupling a 
geographically remote client to a security system server which is capable of authenticating 
a user of the remote client, operatively coupling the remote client to a security gateway 

which is capable of managing the monitoring of the premises, activating a signal at for 

remote monitoring of a premises. A geographically remote client is operatively coupled to a 
security system server capable of authenticating a user of the remote client. The remote 
client is then operably coupled to a security gateway capable of managing the monitoring of 

the premises, activating a signal at the premises Claims: comprising the steps 

of: operatively coupling a remote client to a security system server, said security system 
server being capable of authenticating a user of said remote client ;operatively coupling 
said remote client to a security gateway, said security gateway being capable of managing 

the monitoring of one or more portions premises, said method comprising: operatively 

coupling a remote client to a security system server, said security system server being 
capable of authenticating a user of said remote client;operatively coupling said remote 
client to a security gateway, said security gateway being capable of managing the monitoring 
of one or more portions of said premises;said operative coupling of said remote client to said 

security gateway further said security system server verifying the identity of said user of 

said remote client;transmitting authorization information from said security system server 
to said remote client and from said security system server to said security gateway, said 
authorization information transmitted to said remote client including access permissions for 
said user;said remote client using said authorization information received thereby to initiate 
operative coupling with said security gateway;said security gateway using said 
authorization information received from said security system server and said authorization 
information received from said remote client to complete operative coupling between said 
security gateway and said remote client;said security system server initiating generation of a 
signal at said premises for notifying an occupant at said premises that remote monitoring is 

occurring; andtransferring said remote client;wherein said security gateway generates 

said signal whenever said security gateway is transferring information to said remote 
client;wherein said user is at a location which is geographically remote from said 
premises; wherein access to said security gateway by said remote client is allowed based 
upon said access permissions for said user;wherein said access permissions for said user... 

13/3.K/4 (Item 4 from file: 350) Links 
Fulltext available through: Order File History 
Derwent WPIX 

(c) 2008 The Thomson Corporation. All rights reserved. 
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0013137422 & & Drawing available 

WPI Acc no: 2003-219687/200321 

Related WPI Acc No: 2002-240336; 2002-360431 

XRPX Acc No: N2003-175150 

Multilevel computer security system selects component of security subsystem when 
security level represented in the activation signal corresponds with security level of 
subsystem 

Patent Assignee: FLYNTZ T T (FLYN-I) 
Inventor: FLYNTZ T T 
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Priority Applications (no., kind, date): US 1999427445 A 19991027; US 2000563452 A 
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C-I-P of application 
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C-I-P of application 
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C-I-P of patent 
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Original Publication Data by Authority.. .Original Abstracts:to each security level, and an 
electronically-activated switch for activating only the selected and authorized security level. 
Access to each level of restricted data requires a user to insert his smart card into a smart- 
selected security level. Since only one security level is ever active and the switching from 

one level to another requires the computer Claims: access requests and identification and 

authentication information from a user and correlate it with the security identification 
requirements and access privilege information stored within a security token possessed by 
the user to output an activation signal representative of the security level that will be granted 

to the user;sensor means that enables the transmission of the activation signal from the 

andan electronically-activated power switching means, responsive to the electronic activation 
signals from an access-control means in order to select the components of a security 
subsystem at the granted security level of the user and connect power to only said selected 
components thereby isolating said powered security subsystem and the data at its 

designated security level from all other security subsystems is receiving power from the 

computer-power supply;access control means comprising a micro-controller that processes 
access requests and identification and authentication information from a user and correlate 
it with the security identification requirements and access privilege information stored within 
a security token possessed by the user to output an activation signal representative of the 
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security level that will be granted to the user;sensor means that enables the transmission of 

the activation signal from the access control means to the electronically-activated 

activation signals from an access-control means in order to select the components of a 
security subsystem at the granted security level of the user and connect power to only said 
selected components thereby isolating said 

13/3.K/5 (Item 5 from file: 350) Links 
Fulltext available through: Order File History 
Derwent WPIX 

(c) 2008 The Thomson Corporation. All rights reserved. 

00131 16416 & & Drawing available 
WPI Acc no: 2003-198091/200319 
Related WPI Acc No: 2003-182412 
XRPX Acc No: N2003-157358 

Network-based payment method for commercial application, involves debiting 

purchase amount from user account and crediting to payee account, when funds is 

available in user account 

Patent Assignee: KWAN K H (KWAN-I) 

Inventor: KWAN K H 
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...transmitted account identifier or user phone number. When the password is authenticated, 
the availability of funds in user account is verified. The purchase amount is debited from 
user account and credited to payee account. An encrypted... Original Publication Data by 
Authority. ..Claims: merchant's sub account is held to record a credit entry with an amount of 
money equal to the payer's payment amount on the merchant's monthly telecommunication 

bill over for decryption upon which the details of the transaction will be forwarded to the 

merchant originating the transaction and a copy of the decrypted text message back to the 
end-user where such 

13/3.K/6 (Item 6 from file: 350) Links 
Fulltext available through: Order File History 
Derwent WPIX 

(c) 2008 The Thomson Corporation. All rights reserved. 
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0013041 166 & & Drawing available 
WPI Acc no: 2003-120338/200311 
Related WPI Acc No: 2006-108308 
XRPX Acc No: N2003-095950 

Pre-boot authentication process for desktop computer, involves commencing BIOS 
procedure, only if valid information is transferred between inserted card and BIOS 
Patent Assignee: 02MICRO INC (ZERO-N); LEE S (LEES-I); 02 MICRO INC (OTWO-N) 
Inventor: LEE S 



Patent Family ( 9 patents, 91 & countries ) 
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Based on OPI patent 
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Original Publication Data by Authority.. .Original Abstracts:Based upon an information 
exchange between the security authentication module and the information module, the 
security authentication module controllably allows or prevents the system BIOS start-up 

procedure to resume and finish. In a preferred embodiment, the security authentication 

authorized information module is present. In other preferred embodiments, an adaptive 
security authentication module interface is provided, to allow information exchange with a 

variety of information modules having one or more information formats. In may be 

unique to one or more users. Based upon an information exchange between the security 
authentication module and the information module, the security authentication module 
controllably allows or prevents the system BIOS start-up procedure to resume and finish. In 

a preferred embodiment, the security authentication module is used as a from booting up, 

unless a valid authorized information module is present. In other preferred embodiments, an 
adaptive security authentication module interface is provided, to allow information 
exchange with a variety of information modules having one or more information formats. In 

alternate embodiments an information exchange between the security authentication 

module (10) and the information module (26), the security module (10) allows or prevents 
the system BIOS start-up procedure to resume and finish. ...Claims:the BIOS; starting the 
BIOS procedure interrupting the BIOS procedure during the interval before the 
finish;transferring the information between the module and the BIOS;determining if the 
transferred information if valid... 
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Fulltext available through: Order File History 
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(c) 2008 The Thomson Corporation. All rights reserved. 

0012942827 & & Drawing available 
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Related WPI Acc No: 2003-175051 
XRPX Acc No: N2003-014970 

Bio-metric credit card which employs a processor to generate a security key in response 
to authentication data received via the user authenticator 

Patent Assignee: AUDLEM LTD (AUDL-N); MCGREGOR C M (MCGR-I); MCGREGOR 

D S (MCGR-I); MCGREGOR T M (MCGR-I) 

Inventor: MCGREGOR C M; MCGREGOR D S; MCGREGOR T M 
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...events. A processor generates a security key in response to authentication data received via 
the user authenticator. The security key is derived in part from the contents of the counter. 
Original Publication Data by Authority.. .Original Abstracts: A system for increasing 
transaction security across existing infrastructure is provided. An activation mechanism 
sends an activation signal or a signal providing a PIN and/or other data to a processing 

device Claims: electrical communication with the user authenticator and counter, the 

processor being programmed to generate a security key in response to authentication data 
received via the user authenticator, the security key being derived at least in part from the 

contents of the counter ;a display unit to display the security key on the apparatus 

transaction counting mechanism configured to track authorized device access events;a 
processor device in electrical communication with the user authenticator and counter, the 
processor being programmed to generate a security key in response to authentication data 



11 



received via the user authenticates, the security key being derived at least in part from the 

contents of the counter; anda configured to display the security key on the apparatus 

a security key in response to the bio-metric authorization authentication data received via the 
user authenticator, the security key being derived at least in part from the contents of the 

counter and at from the user's bio-metric authentication data; anda display unit to display 

the security key on the apparatus 1. A system for securely processing transactions, the 

system comprising:a security key device, comprising,a user authenticator configured to 
provide a user an authentication data input for proving the user is authorized to use an 
account associated with the security device,a first counter in communication with the 
userdata received via the user authenticator, the security key being derived at least in part 
from contents of the first counter, andan electronic display in electrical communication with 
the key generator, for displaying the security key in a manner visible upon the structure; 
andan authorization device, comprising,a second counter, anda key confirmation processor 
programmed to confirm an authenticity of the security key in a manner at least partially 
dependent upon the contents of the second counterwherein the security key is derived at 
least partially from the contents of the first counter, wherein the key confirmation processor 
approves a transaction if the contents of the first counter matches contents of the second 
counter within a predetermined range. 
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...NOVELTY - A security system verifies a user as an authorized system user, based on 
comparison of the user voice signal with prestored voice information and retrieves security 
information of the verified user from a memory. The communication parameters are 
negotiated with a secure network site, based on... Original Publication Data by 
Authority.. .Original Abstracts:an identification to the voice browser system that is 
transferred to and verified by the security system. Once the identification is verified, the 
user is prompted by the voice browser system to speak a phrase for voice verification. The... 
... a particular authorized user associated with the identification and stored in a database. 
When the user is verified, the security system retrieves a user private key and certificate 

from the database. In response to the a web site residing on a secure server, the secure 

server and voice browser system initiate a secure key exchange. During the key exchange, 

data packets containing security information are transferred from the voice browser an... 

a particular authorized user associated with the identification and stored in a database. When 
the user is verified, the security system retrieves a user private key and certificate from the 

database. In response to the a web site residing on a secure server, the secure server and 

voice browser system initiate a secure key exchange. During the key exchange, data packets 

containing security information are transferred from the voice browser Claims: in 

response to accessing said secure network site; a storage unit to store voice and security 
information associated with authorized users of said system; and a security system stored 
voice information and to retrieve said security information of said verified user from said 
storage unit and negotiate communication parameters with said secure network site in 

response secure web server;a storage unit to store remote from said network interface 

voice and security information associated with authorized users of said system, wherein 

said security information includes information enabling negotiation of parameters for 
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Alerting Abstract ...market place, as transaction between the buyer and the seller is safe 
because of the transaction service server. Activates the electronic commerce transaction. 
Increases the convenience of the buyer and the efficiency of the transaction... Original 
Publication Data by Authority.. .Original Abstracts: a settlement ned not be provided to the 
seller, where the money is settled to the shopping mall after the delivery is confirmed, 
thereby protecting the users, and where denial of the purchase of the user cannot happen, 

thereby protecting the seller. In order to accomplish the settlement money when 

receiving a deal ending signal from the terminal. This system is buyer's initiated settlement 

system and can enhance safety of the deal provided to the seller, where the money is 

settled to the shopping mall after the delivery is confirmed, thereby protecting the users, and 

where denial of the purchase of the user cannot happen, thereby protecting the seller the 

settlement money when receiving a deal ending signal from the terminal. This system is 
buyer's initiated settlement system and can enhance safety of the deal. ...Claims: approval 
information data transmitted from the payment server;a temporary bank account momentarily 
keeping the money for the ordered product, which is transmitted from the payment server;a 
product transmission information... 
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DtGITAl , CI • RTIFtC ATI i SECURITY A PORTABLH INFORMATION AND 

TRANSACTION PROCESSING SYSTEM AND METIJOD UTIEMNG BIOMETRIC 

AUTHORIZATION AND PiGa'ALCiamHCATK SECURITY liable 

information and transaction processing system and method utilizing foiometrie authorization 

and digital certificate security A POR1 ABEH INFORMATION AND TRANSACTION 

PROCESSING SYSTEM AND METHOD UTILIZING BIOMETRIC AUTHORIZATION 
AND DIGITAL CERTIFICATE SECURITY Alerting Abstract USE - Processor is for 
information and transactions and uses digital certificate security and biomctjfic 
authorization to provide personal verification prior to processing user requested financial 

transactions and providing personal information at point of sale terminals or ATMs- credit 

card etc, and personal information for transfer to a smart card. It uses bionictrie security to 
provide user verification and has digital certificate security with the user required to 
periodically download a temporary digital eertifieafe from a central server— Original 
Publication Data by Authority—Original Abstracts; the I fntversal Card is written with the 
selected card iniVmnation, which is then used to initiate a consumer transaction. In the 
absence of an unexpired digital certificate, however, the selected card information will not be 
written to the Universal... 
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Transferring funds through communications network - by receiving data and matching 
with source account, recipient account and amount to be transferred, then transferring 
after authorisation 
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Original Publication Data by AuthorityOriginal Abstracts: A system (20) and method for 
allowing funds to be transferred instantly to an account so that the funds are available to 

the beneficiary at the time system also enables the user to quantify the amount to be 

transferred in the currency of the originating account or the currency of the receiving 

account, thereby maximizing the flexibility of the system various safeguards to assure 

that only authorized individuals have access to the accounts and the funds are immediately 

verifies successful completion or failure to the customer A system and method for 

allowing funds to be transferred instantly to an account so that the funds are available to the 

beneficiary at the time they are sent, based on customer information enables the user to 

quantify the amount to be transferred in the currency of the originating account or the 
currency of the receiving account, thereby maximizing the flexibility of the system. The 
system further various safeguards to assure that only authorized individuals have access 
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to the accounts and the funds and immediately verifies successful completion or failure to 

the customer A system (20) and method for allowing funds to be transferred instantly 

to an account so that the funds are available to the beneficiary at the time they are sent, 
based on customer information which can be. ..Claims: the destination account; 
andsubsequent to receiving authorization to implement the requested transfer, depositing the 
funds to be transferred into a transfer holding account which is then processed through a 
clearing system local... 
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Alerting Abstract ...ADVANTAGE - Enables user to quantify amount to be transferred in 
currency of originating account or of receiving account, to maximise system flexibility. 
Original Publication Data by AuthorityOriginal Abstracts: A system (20) and method for 
allowing funds to be transferred (28) instantly to an account (30) so that the funds are 

available to the beneficiary at 20) also enables the user to quantify the amount to be 

transferred in the currency of the originating account or the currency of the receiving 

account. Further, the system (20) is provided with safeguards to assured that only 

authorized individuals have access to the accounts (32) and the funds and immediately 

verifies successful completion or failure to the customer A system and method for 

allowing funds to be transferred instantly to an account so that the funds are available to the 

beneficiary at the time they are sent, based on customer information enables the user to 

quantify the amount to be transferred in the currency of the originating account or the 
currency of the receiving account, thereby maximizing the flexibility of the system. The 

system further various safeguards to assure that only authorized individuals have access 

to the accounts and the funds and immediately verifies successful completion or failure to 

the customer A system (20) and method for allowing funds to be transferred (28) 

instantly to an account (30) so that the funds are available to the beneficiary at the time they 

are sent, based on customer information (24 safeguards to assured that only authorized 

individuals have access to the accounts (32) and the funds and immediately verifies 
successful completion or failure to the customer. 
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Alerting Abstract ... specific and customized set of vending parameters. Ensures that 
estimates cover true costs or that bid price does not cover true cost... Original Publication 
Data by Authority.. .Original Abstracts:history data and accepting said bid price (24), if said 
bid price exceeds said determined lowest acceptable price; and sending a confirmation for 
said order (28). ...Claims:price (22) for the present customer-order combination, on the basis 
of at least available stock data and available customer-history data;accepting said bid price, 
if said bid price exceeds said determined lowest acceptable price; andsending a 
confirmation (28) for said order to said customer... 

15/3,K/2 (Item 2 from file: 350) Links 
Fulltext available through: Order File History 
Derwent WPIX 

(c) 2008 The Thomson Corporation. All rights reserved. 

0012989356 & & Drawing available 
WPI Acc no: 2003-067083/200306 
XRPX Acc No: N2003-052063 

Broadband service provision system records events occurring between user terminal 
and remote service, upon redirecting user terminal to access remote service, based on 
stored service data and user data 
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Alerting Abstract ... users without significant interfacing and development by the service 
providers. Enables broadband access providers to offer value-added services to the end user 
in a scalable end-to-end solution. The broadband system acts as a middle ware platform or 
portal by providing the necessary security, authorization, authentication and accounting 
facilities to the services required without requiring integration with the user interface, by 
recording without requiring integration with the user interface, by recording the events 
occurring... 
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...etc.; Interoperability - transaction/message protocols, distributed processing mechanisms 
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authorization/ authentication mechanisms, etc.; Service Directory - service registration, 

lookup, port/task mapping, parameters, etc.; Software - public vs working in many of 

these areas. In the process of developing StarView, which is the user interface to the Space 
Telescope Data Archive and Distribution Service (ST-DADS), these issues and the... 
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User directed network interaction monitoring providing method for use with voice- 
capable system, involves receiving user -defined designation during monitored network 
interaction, where user -defined designations designates data 
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Alerting Abstract ... a computing system comprising a secure user interface application a 
computer program product comprising instructions to perform user directed network 

interaction monitoring providing utilizes VIVO technology, thus increasing the number 

of security systems reliant on voice commands and allowing the users without security risks 
to present with voice related systems... Original Publication Data by Authority. ..Claims: A 
method for use with a voice-capable system, the voice-capable system including a security 
interface for authenticating a user to the voice-capable system, the method 
comprising:receiving a request from a user computationally... 
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Alerting Abstract ...210) of the entities to a universal security management interface 
(USMI) (150) provided by a security management center (SMC) (110). The SMC manages 
user, authorization and identity verification information of the network, interacts with the 
entities through the SMGs and with an administrator through a security management user 
interface (SMUI) (120). ... user management of a universal security management system for 
network management a method for user authorization of a universal security management 

system a method for user verification of a universal security management system 

mobile communication network, that is constituted by network devices provided by various 
manufacturers, for authorization, user verification, access control and security logging of 1 

entities security domain to a universal security management interface. Moreover, there is 

provided a security management user interface to the security administrator. The security 
management system of the present invention runs through four work flows, i.e., user 
management, user authorization, user verification, and user authentication. Both the 

security management gateway and the function entities are logical entities security 

manager. The universal security management system is implemented by four steps of user 
management, user authorization, user authentication and user identification. The security 
management gateway and functional entity are logic entities... 
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Alerting Abstract ... ADVANTAGE - Maintains proper user-to-data associations across 
multiple devices by a simplified and minimal user interface that permits user to easily 
authenticate other members of a shared space and to encrypt information. Disallows 
communication with individuals unless their contact identity is manually authenticated or 
administrator-certified. Prevents confusion... Original Publication Data by 
Authority.. .Original Abstracts:created in a peer-to-peer collaborative system by means of a 
simplified and minimal user interface that permits users to easily authenticate other 
members of a shared space. In particular, support is provided for automatically building 
authenticated relationships even if users do not take the time to authenticate other users. 
When a user enters a shared space and views the contacts in that space, the display names 

of each contact are accompanied by distinctive icons Claims: may have multiple identities 

each with an associated display name, comprising: (a) on a graphic user interface, displaying 
a name conflict indicator next to a first and a second display name, which display names are 
associated... 
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User authenticating system for providing user access to computer system, has process 
circuit to grant user access to computer system if security information and implicit 
input matches information related to user 
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Alerting Abstract ...system has an input device to provide an implicit input to a computer 
system. A user interface receives security information, and a compare circuit determines 

whether the information and input match information 1 10 User interface Original 

Publication Data by AuthorityOriginal Abstracts: A method and system for authenticating 
a user to access a computer system. The method comprises communicating security 
information to the computer system, and providing the computer system with an implicit 

input. The Claims: comprising: an input device configured to communicate an 

authorization pattern to an electronic device; a user interface configured to receive security 
information; a compare circuit coupled to the input device and configured to determine 
whether the authorization pattern matches a stored pattern; a timer configured to measure a 
duration of time between... 
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Authorization and security management system for computer implemented system, 
determines whether operation requested by user is valid based... Original 
Titles:Authorization and security management system and method Alerting Abstract 
DESCRIPTION - An INDEPENDENT CLAIM is also included for authorization and 

security management method USE - For authorization and security management of 

computer implemented system DESCRIPTION OF DRAWINGS - The figure shows the 

hardware architecture of the authorization and security management system... Original 
Publication Data by AuthorityOriginal Abstracts: An authorization and security 
management system includes a plurality of client computers (10), an application server (12), 
and a database (14). Each client computer includes an interactive user interface (100) for 
users to send requests for operations. Each client computer is interconnected with the 

application server through a common network (11), and the application is interconnected 

with the database through a database link (13). The application server includes an 
authorization device (120), a security device (121), and a verification device (122). The 
authorization device is for maintaining user passwords and assigning roles to users. The 
security device is for encrypting user passwords and decrypting encrypted passwords. The 
verification device is for verifying passwords input by users when the users request to log in 
the system, and for verifying operations requested by users. The... Claims: What is claimed 
is: 1. An authorization and security management system, comprising:a plurality of client 
computers, each of the client computers providing an interactive user interface through 
which a user requests an operation;an application server, comprising:a role defining unit for 
defining at least one role, the at least one role... 
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Application-level virtual private networking method in enterprise organization, 
involves authenticating requester message with hash value calculated by connection 
manager, before forwarding message to external resource 
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Alerting Abstract ... program for application-level virtual private networking; system for 

application-level virtual private networking; and user interface method ADVANTAGE 

- By authenticating the requester message with calculated hash value, enables users to 
securely share application and network resources and ensures that only approved and 
unaltered applications can access the resources being made availableOriginal Publication 
Data by AuthorityOriginal Abstracts: A method for enabling users to securely share 
application information and resources by granting resource owners access to user- 
application combinations. It provides a means for ensuring that only A method for 

enabling users to securely share application information and resources by granting resource 
owners access to user-application combinations. It provides a means for ensuring that only 
approved and unaltered... 
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Secure resource interacting apparatus for biometric verification/identification 
techniques has verification/identification system to provide instructions to security 
server 
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...NOVELTY - A biometric data input system is coupled to the security server to obtain user 
biometric data from user. A biometric verification/identification system accesses data store 
to evaluate user biometric data. The verification/identification system provides instructions 
to the security server and provides control signals for interacting with secure resource. 
Original Publication Data by Authority.. .Original Abstracts:determine if the user may 
control or interact with the secure resource. If interaction is permitted, the security server 
sends control signals to the secure resource. The telephone system provides an interface 
through which the user trains the system to store the biometric verification/identification 

data of that user determine if the user may control or interact with the secure resource. If 

interaction is permitted, the security server sends control signals to the secure resource. 
The telephone system provides an interface through which the user trains the system to store 

the Claims: biometric data input system coupled to said security server and operable to 

obtain user biometric data from said user ;said biometric verification/identification system 
being configured to access said data store and to evaluate said user biometric... 
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User identity authentication program storage device for computer, involves establishing 
security process, enabling authentication procedure on computer and storing secure 
user acknowledgement 
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User identity authentication program storage device for computer, involves establishing 
security process, enabling authentication procedure on computer and storing secure 
user acknowledgement Original Publication Data by Authority.. .Original 
Abstracts:preventing unauthorized transactions at either the workstation or network level. 
The PDF provides a graphic user interface using objects that encapsulate programs with 
data, such as user preferences, default directories, and access privileges. The Daemon 
performs many tasks, including starting the PDF, enumerating the windows of the graphic 
user interface, and recording operations. ...Claims: or restarting the computer operating 
system; enabling an authentication procedure on the computer by the security process; 
storing a secure user acknowledgment by the security process which is acceptable to the 
operating system; and executing the computer operating system. 
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Secure shell protocol access method for networked computer system, involves providing 
security policy approval for logical channel allocation by comparing access control 
permissions with cached session key ...a user ID to privileges, is associated with the cached 
session key and ID. A security policy approval is provided to authenticated client requesting 
logical channel allocation, by comparing access control policy repository... Original 
Publication Data by AuthorityOriginal Abstracts: An enhanced Secure Shell (SSH) protocol 
having fine-grained access security policy management and enforcement. Via an 
authorization application programming interface (aznAPI), remote user protocol 
connections and sessions may be added to the protected object space of a policy 

management system resources once authenticated, the user is granted permission to 

access only the system resources allowed in the security policy or policies Secure Shell 

(SSH) protocol having fine-grained access security policy management and enforcement. Via 
an authorization application programming interface (aznAPI), remote user protocol 

connections and sessions may be added to the protected object and access to system 

resources once authenticated, the user is granted permission to access only the system 
resources allowed in the security policy or policies. ...Claims: of privileges;associating said 
credentials with said cached session key and ID; andperforming a security policy approval 
responsive to a request allocation of a logical channel, said approval considering 
permissions set in said access control policy repository in comparison to said cached session 

key, ID and associated credentials fine-grained privileges;catching and associating said 

credentials with said session key; andperforming a security policy approval responsive to a 
Secured Shell logical channel allocation request, said approval considering permissions set in 
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accessing respective portions of shared database, when owner and shared access 
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Alerting Abstract ...ADVANTAGE - Provides to the user a user interface which allows 
him to access the LAN resources in a flexible way... Original Publication Data by 
Authority. ..Original Abstracts:drive servers and more than one email servers. The 
architecture provides to the user a user interface which allows him to access its ressources 
in a flexible way. ...Claims: connected to said WAN, authenticating a local user and 
providing an owner authentication signal; a shared database, said shared database 
comprising said shared data; a permission database, the permission database comprising a 
relation between at least one user identification, at least one part of said data and said 
permission rights; a shared access authentication unit, connected to said WAN, the shared 
access authentication unit authenticating a non local user using said permission database 
and providing a shared access authentication signal; a database manager, connected to at 
least said owner authentication unit, to said shared access authentication unit, to said 
permission database and to said shared database, the database manager, receiving a request 
from a user and providing an access with permission right to at least one part of said shared 
data of said shared database with said permission rights if an owner authentication signal or 
if a shared access authentication signal is received. 
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...NOVELTY - The system includes several peer devices, each with a user interface and a 
network interface for enabling communications over a data network. A peer server, coupled... 
Original Publication Data by Authority.. .Original Abstracts:to-peer communications. The 
hybrid architecture allows centralized administration and policy management of 
authentication, obstacle transversal and security methods, to ensure the overall system 

integrity required by business systems. Typical peer user devices communications. The 

hybrid architecture allows centralized administration and policy management of 
authentication, obstacle transversal and security methods, to ensure the overall system 
integrity required by business systems. Typical peer user devices implement peer client 

programming, for signaling communication with the server and for peer-to Claims: via a 

data network, comprising: a plurality of peer devices, each peer device having a user 
interface and a network interface for enabling communications over the data network ;a peer 
server, coupled for data communication via the data network, for providing session 
establishment... 
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Network information handling system for client server environment, includes server 

application with user interface running on server, having shared access data tier, client 

and server application code tier 
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Network information handling system for client server environment, includes server 
application with user interface running on server, having shared access data tier, client 
and server application code tier Alerting Abstract ...NOVELTY - A server application 
comprising user interface running on a server. The application has client application code 

tier (310) for initiating processing interface which allows the user of the server 

application to customize or create their own user interface. Readily adaptable to internal 
charge back rather than payment... Original Publication Data by Authority. ..Original 
Abstracts:to access the server computer system. The system further includes a server 
application comprising a user interface running on the server computer system and having a 

multi-tier architecture. The multi-tier architecture includes a first to allow a user, such as 

a system administrator or the like, to customize the user interface. In a further aspect, a 

method of customizing a server application is also provided to access the server 

computer system. The system further includes a server application comprising a user 
interface running on the server computer system and having a multi-tier architecture. The 

multi-tier architecture includes a first tier of client application code code, and a third tier 

of shared access and data code. An application programming interface is configured to allow 
a user, such as a system administrator or the like, to customize the user interface. In a further 
aspect, a method of customizing a server application is also provided. ...Claims:plurality of 
users to access the server computer system; and a server application comprising a user 
interface running on the server computer system, the server application having a multi-tier 
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architecture comprising a first tier of client application code for initiating processing by the 

server application in a third tier of shared access and data code; an application 

programming interface configured to allow customization of the user interface 

requisition for the verified user requested print on demand items ;a server application 
comprising a user interface running on the server computer system, the server application 

having a multi-tier architecture comprising to input by a user of the client computer 

system, a middle tier of object-oriented server application code, and a third tier of shared 
access and data code; andan application programming interface configured to allow 
customization of the user inter face,wherein the customizable system is configured to allow a 
first user to access a first 
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Financial transaction facilitating system in real estate through Internet, presents terms 
of transaction and documents to participants based on appropriate rule 
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Alerting Abstract ... medium stored with financial transaction facilitating provision 
program;Financial transaction monitoring and managing system;Graphical user interface for 
managing transactionsOriginal Publication Data by Authority. ..Original 
Abstracts: automatically calculates all required payments, arranges for the electronic transfer 
of funds upon input by the participants of final authorization, accompanied by digital 
verification, and creates audit records of the final transaction details... 
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Secure communication system e.g. Internet system, has cryptographic token storing key 
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Original Publication Data by Authority.. .Original Abstracts: a PC card, and IC card or a 
Smart Card having a contact sensitive graphical user interface (40). The token (24) captures 
through the interface (40) a template associated with a user's ideogram signature 

information The template is then compared with subsequent inputs of this ideogram 

signature information from the user and verified to enable the cryptographic token to 
function with the security module (22). The cryptographic token (24) may have either an 

independent power source permitting the token device (24) which must be enabled by a 

user and temporarily connected with the security module (22) to permit the use of the user 
17/3.K/16 (Item 15 from file: 350) Links 
Fulltext available through: Order File History 
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establishment - includes security processor which restricts access to printer for printing 
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Alerting Abstract ...A security processor restricts access to selected functions after 
confirming identity of the user. The security processor compares unique identifier 
associated with a specific printer and a stored identifier to confirm... Original Publication 
Data by Authority.. .Original Abstracts: allow for the configuration and customization of the 
execution control processor (10) and a graphical user interface (18). A communications 
processor (20) is provided to establish network connection with a host computer. Context- 
sensitive help is... Claims: A data processing system operable to process financial 
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instruments, comprising:a graphical user interface operable to present a plurality of options 

to a user of the system;a data base processor operable to of the system prior to allowing 

access to the printer for printing the financial instruments, the security processor being 
further operable to compare a unique identifier associated with a particular printer, to... 
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Alerting Abstract ...The source machine also includes a security system with a user 
interface module (16), and a security module (17) which allows the production and 
verification of digital signatures. The operator of the source terminal is able... Original 
Publication Data by AuthorityOriginal Abstracts: The invention relates to an apparatus for 
secure facsimile transmission comprising: - a user interface (16) making it possible to set up 
a dialogue with the latter; - a security module (17) allowing production and verification of 

digital signatures, and combating reproduction. The invention also relates to a secure a 

secured telecopier or fax unit having such a security device. The device incorporating a user 
interface (16) permitting the establishment of a dialogue therewith and a security module 
(17) permitting the production and checking of digital signatures and preventing replay. 

The invention also relates to a fax unit including Claims: 1. Device for rendering secure 

the transmission of faxes comprising a user interface (16) making it possible to establish a 
dialogue therewith, characterized in that it comprises a security module (17) making it 
possible to detect replays, prevent a retransmission of a document to the same recipient 

without the reader individual to the user and in which are stored: - a first secret element 

which is a confidential code enabling the card to authenticate its legitimate owner, - a 

second secret element (SA) enabling the card of the transmitter to calculate a We claim: 

Device for rendering secure the transmission of faxes comprising a user interface and a 

security module, said security module being operable to generate and check a plurality 

signatures including an operator digital signature and a transmission date and time digital 
signature, said security module including means for authenticating the operator, means for 
verifying transmission and reception, and means for... 
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51 259752 S ( VERIF? ? ? OR VERIFICATION? ? OR VAL I DAT ? ? ? OR VALIDATION OR 
AUTHENTICAT? OR CONFIRM?) (3N) (CUSTOMER? ? OR USER? ? OR CONSUMER? ? OR 
CUSTOMER? ? OR PARTICIPANT? ?) 

52 33710 S SI ( 7N) (FINANC? () INSTRUMENT OPTION? ? OR FUTURE? ? OR FUND? ? 
OR STOCK? ? OR BOND? ? OR SHARE? ? OR COMMODIT??? OR MONEY OR SECURIT??? OR 
(EQUITIES OR EQUITY) () (MARKET? ? OR TRADE?? OR TRADING OR INVESTMENT? ? OR 
INVEST???) ) 

53 1970133 S (ALLOW??? OR ALLOWING OR ALLOWANCE OR PERMISSION OR PERMIT? 
OR APPROV?? OR AUTHORI ?ATION OR ACCEPT? OR PERMIT? OR GRANT??? OR 

AUTHORI ? ? ? ) (3N) ( FINANC ?() INSTRUMENT OPTION? ? OR FUTURE? ? OR FUND? ? OR 
STOCK? ? OR BOND? ? OR SHARE? ? OR COMMODIT??? OR MONEY OR SECURIT??? OR 
(EQUITIES OR EQUITY) () (MARKET? ? OR TRADE?? OR TRADING OR INVESTMENT? ? OR 
INVEST???) ) 

54 1374561 S (START??? OR BEGIN? OR INITIAT? ? ? OR ACTIVAT? ? ? OR 
ORIGINAT? ? ? ) (3N) (ORDER? ? OR DEALING? ? OR TRADE? ? OR TRADING OR TRANSACTION? 
? OR PURCHAS??? OR EXCHANG??? OR DEAL? ? OR SELL??? OR SALE? ? OR TRANSFER? OR 
BUY???) 

55 28546349 S (CUSTOMER? ? OR USER? ? OR CONSUMER? ? OR CUSTOMER? ? OR 
PARTICIPANT? ?) 

56 536546 S (PROPOSAL? ? OR SUBMISSION? ? OR BID OR BIDS OR OFFER? ? OR 
PROFFER? ? OR TENDER? ?) (3N) (PARAMETER? ? OR VALUE? ? OR ATTRIBUTE?? OR FACTOR? 
? OR ELEMENT? ? OR CONDITION? ?) 

57 486403 S USER () INTERFACE 

58 704128 S (EXCHANG??? OR INTERCHANG? ? ? OR INTER () CHANG? ??)( 3N ) 
(COMMUNICATION OR TRANSMISSION OR TRANSACTION OR TRAD???) 

59 1636275 S (MATCH?? OR CORRESPOND? OR CORRELAT??? OR CONFORM OR 
ASSOCIAT??? OR MAPP??? OR LINK??? OR COUPL??? OR JOIN??? OR RELAT?? OR 
RELATIONSHIP? ? OR INTERRELAT?? OR INTERCONNECT??? OR CONNECT??? OR 
INTERDEPEND? OR INTERACTION OR AFFILIATION? OR ASSOCIATION? OR RELAT???) (3N) ( 
PARAMETER? ? OR VALUE? ? OR ATTRIBUTE?? OR FACTOR? ? OR ELEMENT? ? OR 
CONDITION? ?) 

510 353 S AU= (TEMPLETON, J? OR TEMPLETON J? OR TEMPLETON ( 2N) J? OR 
BHARGAVA, S? OR BHARGAVA S? OR BHARGAVA ( 2 N ) S ? ) 

511 0 S S10 AND S2 

512 3 S S10 AND SI 

513 1149 S S2(7N)S3 

514 0 S S13 (3N) S4 

515 1149 S S13 (7N) S5 

516 0 S S15(7N)S6 

517 5 S S15(7N)S7 

518 5 S S15(5N)S8 

519 5 SS18 NOT SI 7 

520 3 S S13 (ION) S9 
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Designated States: (Ail protection types applied unless otherwise stated - for applications: 
2004+) 



Publication Language: linglish 
iiliiHplsasfUisgiiiSii llngiish 
Fulliext word count: 5323 
Detailed Description; 

.<.and> If they match* the user is then allowed it* use the instrument If the verification, fails, 
the user may he allowed to fry again, offer different or additional 1 0 verification, his 
or.. .various reasons or in various situations J ''or example, a merchant may Initiate or 
implement a verification process when a customer wishes to make a purchase (e.g., if the 
customer is new or if the or bank.) or by telephone. 

Another embodiment of the invention may be applied to prospectively verify a user's 

authority to use a financial instrument. For example, an on-line system may allow require 

the financial instrument, or the user's authorization to use the instrument, to he verified 
before allowing the user to use It in the system* 

H(L 1 depicts a system for verifying a user... other instruments that can be verified through a 
method of the invention may perform such verification for ail users, just for users deemed 

high risk, or for some other group of users. For example warrant verification, or so high 

that the user should be rejected without even attempting to verify the user's selected 
instrument. 

Because the identity of a vendor {e.g., merchant) involved in a... ...used to perform a 

verifying transaction may be one of the details required of a user in wder to verify a 
financial instrument. Thus, the entity (eg.* merchant, vendor, on-line service) performing 
or.. .in one embmiimenl of the invention* to verification of their credit, cards,, whereas all 
international users may require verification. Similarly, all bank accounts or other sources of 
electronic cheeks or debits may be deemed.*, -a monthly statement .from, the user's financial 
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institution).. Or,, the system may restart the verification process, restrict the user's aetivity or 
use of the in sl.ru meitl, etc. the method may therefore end or return... 



Claims: 

...selected details. 

40 The apparatus of claim 3% iwther eonipistng prompting means for 
jxrwrtpUny the customer to provide sukl confirmation set of details.! 0 
4t The apparatus of claim 4(X wherein said interface means... 
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INTEGRATED SYSTEM FOR ORDERING, FULFILLMENT, AND DELIVERY OF 
CONSUMER PRODUCTS USING A DATA NETWORK 

SYSTEME INTEGRE DE COMMANDE, D'EXECUTION DE COMMANDE ET DE 
LIVRAISON DE PRODUITS DE CONSOMMATION FAISANT APPEL A UN RESEAU 
DE DONNEES 
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Detailed Description: ...146 which manages financial 

and human resource infori-nation, and communicates with other subsystems for 
authenticating users and assigning roles; 

(6) an Order Fulfillment Subsystem (OFS) 160 which facilitates the 
fulfillment of... communicate with the MFD server. 

After the MFD has processed all appropriate transactions at the customer 
delivery site (including verification of current ordered items received by the customer), the 
MFD may also be configured or.. .a modified or "zero balance" receipt to the customer at the 
time of delivery, the customer receives immediate confirmation of all currently pending 
charges for which the customer will be billed. This provides the.. .available resource capacity 
in the Transportation Subsystem before a particular delivery window request may be 
confirmed. Additionally, the customer address or shipping address must be mapped with a 
pre-determined deliverable area. 

For example the Route Planner to the Transportation Subsystem, where it is then 

forwarded (22) to the customer. Additionally, upon confirming the delivery window 
request, the Route Planner forwards to the Webstore database transportation capacity data... 

Claims: 

...customer order; 

5 processing said fulfilled customer order for shipment to a customer; and generating 
customer order confirmation data after the fulfilled customer order has been shipped to the 
customer. 105. The method... 
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Fulltext word count: 21321 
Detailed Description: 

...electronic mail message with an order confirmation, displaying a 1 5 new 
screen with order confirmation to the user, and/or other notification means. 

Also, at step 366, the user can continue to shop be able to do so from current 

inventory while the reservation is valid. If the consumer does not confirm their 
order within a predetermined period, the reserved 1 5 items are released; 
although, the... 

? t /3,k/all 

17/3.K/1 (Item 1 from file: 16) Links 
Gale Group PROMT(R) 
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ObjectWave and Oakton Community College Launch Enterprise Wide E-Commerce 
Solution. 

PR Newswire , p 8526 
July 26 , 1999 

Language: English Record Type: Fulltext 
Document Type: Newswire ; Trade 
Word Count: 520 



. . .Web-based secured transaction system, which enables credit 
card based 

payments; a Java thin client user interface; 
authentication and security authorization via LDAP; 
integration of CTI for touch tone registration; a GemStone/S 
object server, 
an . . . 

17/3,K/2 (Item 1 from file: 148) Links 
Gale Group Trade & Industry DB 
(c)2008 The Gale Group. All rights reserved. 
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Solution. 
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. . .Web-based secured transaction system, which enables credit 
card based 

payments; a Java thin client user interface; 
authentication and security authorization via LDAP; 
integration of CTI for touch tone registration; a GemStone/S 
object server, 
an . . . 
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Publication Language: English 
Filing Language: English 
Fulltext word count: 10054 
Detailed Description: 

...passes it along path 266 to security module 56 for logging and verification. Upon 
the verification of the user identification, security module 56 permits access to 
graphical user interface module 69 via path 268. Graphical user interface module 
69 uses path 270 to retrieve objects from local client database 62. Local client... 

? t /3,k/all 

18/3.K/1 (Item 1 from file: 16) Links 
Gale Group PROMT(R) 
(c) 2008 The Gale Group. All rights reserved. 

08317602 Supplier Number: 70356164 (USE FORMAT 7 FOR FULLTEXT) 

AuthXML Working Group Submits AuthXML Specification to OASIS XML Security 
Services Technical Committee. 
Business Wire , p 2349 
Feb 12 , 2001 

Language: English Record Type: Fulltext 
Document Type: Newswire ; Trade 
Word Count: 637 



...and organizations. With each organization conducting business 
on the Web 

using separate systems for performing user authentication and 
authorization, exchanging security data between 
trading partners, affiliated organizations, and between 
businesses 

and consumers, is impossible. AuthXML defines a standard 
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...and organizations. With each organization conducting business 
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on the Web 

using separate systems for performing user authentication and 
authorization, exchanging security data between 
trading partners, affiliated organizations, and between 
businesses 

and consumers, is impossible. AuthXML defines a standard 
method. . . 
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...and organizations. With each organization conducting business 
on the Web 

using separate systems for performing user authentication and 
authorization, exchanging security data between 
trading partners, affiliated organizations, and between 
businesses 

and consumers, is impossible. AuthXML defines a standard 
method. . . 



? t/3,k/all 

20/3K/1 (Item 1 from file: 348) Links 

Fulltext available through: Order File History 
EUROPEAN PATENTS 

(c) 2008 European Patent Office. All rights reserved. 
02240308 

System and method for biometric authentication 
System und Verfahren fur biometrische Authentifizierung 
Systeme et procede pour une authentification biometrique 

Patent Assignee: 

• Huawei Technologies Co., Ltd.; (7236900) 

Huawei Administration Building, Bantian,; Longgang District,ShenzhenGuangdong 
518129; (CN) 

(Applicant designated States: all) 



46 



Inventor: 

• Wei Jiwei 

Huawei Adm. Bldg, Bantian, Longgang District; 518129 Shenzhen, Guangdong 
Province; (CN) 

• Zheng Zhibin 

Huawei Adm. Bldg, Bantian, Longgang District; 518129 Shenzhen, Guangdong 
Province; (CN) 

• Li Chao 

Huawei Adm. Bldg, Bantian, Longgang District; 518129 Shenzhen, Guangdong 
Province; (CN) 
Legal Representative: 



• Epping - Hermann - Fischer (101754) 

Patentanwaltsgesellschaft mbH Ridlerstrasse 55; 80339 Munchen; (DE) 





Country 


Number 


Kind 


Date 




Patent 


EP 


1777640 


Al 


20070425 


(Basic) 


Application 


EP 


2006022156 




20061023 




Priorities 


CN 


200510100660 




20051022 





Designated States: 

AT; BE; BG; CH; CY; CZ; DE; DK; EE; ES; 
FI; FR; GB; GR; HU; IE; IS; IT; LI; LT; 
LU; LV; MC; NL; PL; PT; RO; SE; SI; SK; 
TR; 



Extended Designated States: 
AL; BA; HR; MK; YU; 



IPC 


Level 


Value 


Position 


Status 


Version 


Action 


Source 


Office 


G06F- 
0021/20 


A 


I 


F 


B 


20060101 


20070201 


H 


EP 



Abstract Word Count: 105 
NOTE: 2 

NOTE: Figure number on first page: 2 



Type | Pub. Date | Kind | Text 



Publication: English 
Procedural: English 
Application: English 



Available Text 


Language 


Update 


Word 
Count 


CLAIMS A 


(English) 


200717 


1111 


SPEC A 


(English) 


200717 


4323 


Total Word Count (Document A) 5434 


Total Word Count (Document B) 0 


Total Word Count (All Documents) 5434 



47 



Claims: ...privilege authentication in accordance with the privilege attribute information if 
the identity authentication result is acceptable . 

19. A security authentication method, comprising: a privilege authentication subsystem 
outputting user's attribute parameter information, wherein the attribute parameter 
information corresponds to privilege attribute information sent from a user terminal; 



a biometric authentication subsystem requesting for biometric recognition parameter. 

20/3K/2 (Item 2 from file: 348) Links 

Fulltext available through: Order File History 
EUROPEAN PATENTS 

(c) 2008 European Patent Office. All rights reserved. 
02018194 

Secure transaction management 
Gesicherte Transaktionsverwaltung 
Gestion de transactions securisees 

Patent Assignee: 

• Intertrust Technologies Corp.; (2434323) 

955 Stewart Drive; Sunnyvale, CA 94085; (US) 
(Applicant designated States: all) 

Inventor: 

• Ginter, KarlL. 

10404 43rd Avenue; Beltsville, MD 20705; (US) 

• Shear, Victor H. 

5203 Battery Lane; Bethesda, MD 20814; (US) 

• Sibert, W. Olin 

30 Ingleside Road; Lexington, MA 02173-2522; (US) 

• Spahn, Francis J. 

2410 Edwards Avenue; El Cerrito, CA 94530; (US) 

• Van Wie, David M. 

51430 Willamette Street; 6 Eugene, OR 97401; (US) 
Legal Representative: 



• Beresford, Keith Denis Lewis (28273) 

BERESFORD & Co. 16 High Holborn; London WC1V 6BX; (GB) 





Country 


Number 


Kind 


Date 




Patent 


EP 


1621960 


A2 


20060201 


(Basic) 




EP 


1621960 


A3 


20070110 




Application 


EP 


2005076129 




19970829 




Priorities 


US 


706206 




19960830 





48 



Designated States: 

AT; BE; CH; DE; DK; ES; FI; FR; GB; GR; 
IE; IT; LI; LU; MC; NL; PT; SE; 

Related Parent Numbers: Patent (Application): EP 922248 (EP 97939670) 



IPC 


Level 


Value 


Position 


Status 


Version 


Action 


Source 


Office 


G06F- 
0021/00 


A 


I 


F 


B 


20060101 


20060913 


H 


EP 



Abstract Word Count: 51 
NOTE: 70 

NOTE: Figure number on first page: 70 



Type | Pub. Date | Kind | Text 



Publication: English 
Procedural: English 
Application: English 



Available Text 


Language 


Update 


Word 
Count 


CLAIMS A 


(English) 


200605 


249 


SPEC A 


(English) 


200605 


180527 


Total Word Count (Document A) 180807 


Total Word Count (Document B) 0 


Total Word Count (All Documents) 180807 



Specification: ...SPE service breakdown for which individual service notification addresses 
may be provided: Channel Services Manager Authentication Manager/Secure 
Communications Manager Secure Database Manager 



The Channel Services Manager is the principal service Manager 752 supports three 

subservices: user name services, host name services, and services name services. User name 
services provides mapping and lookup between user name and user ID numbers, and may... 



20/3K/3 (Item 3 from file: 348) Links 

Fulltext available through: Order File History 
EUROPEAN PATENTS 

(c) 2008 European Patent Office. All rights reserved. 
01626839 

Initializing security information on a network device 
Initialisierung der Sicherheitsinformation in einem Netzwerkgerat 
Initialisation d'information de securite dans un dispositif reseau 

Patent Assignee: 

• Hewlett-Packard Company; (206037) 

3000 Hanover Street; Palo Alto, CA 94304; (US) 
(Proprietor designated states: all) 



49 



Inventor: 



• Robinson, Michael C. 

8872 Water Song Circle; Roseville, CA 95747; (US) 

Legal Representative: 



• Powell, Stephen David et al (52315) 

Williams Powell, Morley House, 26-30 Holborn Viaduct; London EC1A 2BP; (GB) 





Country 


Number 


Kind 


Date 




Patent 


EP 


1341343 


Al 


20030903 


(Basic) 




EP 


1341343 


Bl 


20050518 




Application 


EP 


2003250637 




20030131 




Priorities 


US 


62382 




20020201 





Designated States: 
DE; FR; GB; 



Extended Designated States: 
AL; LT; LV; MK; RO; 

International Patent Class (V7): H04L-012/24; H04L-029/06Abstract Word Count: 145 
NOTE: 2 

NOTE: Figure number on first page: 2 

| Type | Pub. Date | Kind | Text 



Publication: English 
Procedural: English 
Application: English 



Available Text 


Language 


Update 


Word 
Count 


CLAIMS A 


(English) 


200336 


377 


SPEC A 


(English) 


200336 


3316 


CLAIMS B 


(English) 


200520 


397 


CLAIMS B 


(German) 


200520 


361 


CLAIMS B 


(French) 


200520 


509 


SPECB 


(English) 


200520 


3216 


Total Word Count (Document A) 3694 


Total Word Count (Document B) 4483 


Total Word Count (All Documents) 8177 



Specification: ...application 301 sends the security parameters in an encrypted mode over the 
network. These security parameters include anything related to security and/or 
authorization, such as passwords, user authentications, access lists, user keys, 
authentication keys, privacy keys, context, 802.11 access point keys, encryption/decryption 
data, registration data, etc... 



Specification: ...application 301 sends the security parameters in an encrypted mode over the 
network. These security parameters include anything related to security and/or 
authorization, such as passwords, user authentications, access lists, user keys, 



50 



authentication keys, privacy keys, context, 802.11 access point keys, encryption/decryption 
data, registration data, etc... 



? t /3,k/all 

17/3.K/1 (Item 1 from file: 23) Links 
CSA Technology Research Database 
(c) 2008 CSA. All rights reserved. 
0004430866 IP Accession No: N94-22537 

Recommendations for a service framework to access astronomical archives (Abstract 
Only) 

TRAVISANO, J J; POLLIZZI, J Space Telescope Science Inst., Baltimore, MD. 

[TRAVISANO] 

Publication Date: 1992 

Conference: 

NASA, Washington, Second Annual Conference on Astronomical Data Analysis Software 
and Systems. Abstracts p 106 (SEE N94-22438 05-89) , UNITED STATES 

Document Type: Conference Paper 
Record Type: Abstract 
Language: ENGLISH 

File Segment: Aerospace & High Technology 
Abstract: 

...etc.; Interoperability - transaction/message protocols, distributed processing mechanisms 
(DCE, ONC/SunRPC, etc), networking protocols, etc.; Security - user registration, 
authorization/ authentication mechanisms, etc.; Service Directory - service registration, 

lookup, port/task mapping, parameters, etc.; Software - public vs working in many of 

these areas. In the process of developing StarView, which is the user interface to the Space 
Telescope Data Archive and Distribution Service (ST-DADS), these issues and the... 

17/3,K/2 (Item 1 from file: 350) Links 
Fulltext available through: Order File History 
Derwent WPIX 

(c) 2008 The Thomson Corporation. All rights reserved. 

0016842381 & & Drawing available 
WPI Acc no: 2007-557443/200754 
XRPX Acc No: N2007-429514 

User directed network interaction monitoring providing method for use with voice- 
capable system, involves receiving user -defined designation during monitored network 
interaction, where user -defined designations designates data 

Patent Assignee: JUNG E K Y (JUNG-I); LEVIEN R A (LEVI-I); LORD R W (LORD-I); 
MALAMUD M A (MALA-I); RINALDO J D (RINA-I) 

Inventor: JUNG E K Y; LEVIEN R A; LORD R W; MALAMUD M A; RINALDO J D 



51 



Patent Family ( 1 patents, 1 & countries ) 



Patent Number 


Kind 


Date 


Application 
Number 


Kind 


Date 


Update 


Type 


US 20070101402 


Al 


20070503 


US 2005263575 


A 


20051031 


200754 


B 



Priority Applications (no., kind, date): US 2005263575 A 20051031 



Patent Details 



Patent Number 


Kind 


Lan 




Draw 


Filing Notes 


US 20070101402 


Al 


EN 


19 


5 


1 



Alerting Abstract ... a computing system comprising a secure user interface application a 
computer program product comprising instructions to perform user directed network 

interaction monitoring providing utilizes VIVO technology, thus increasing the number 

of security systems reliant on voice commands and allowing the users without security risks 
to present with voice related systems... Original Publication Data by Authority. ..Claims: A 
method for use with a voice-capable system, the voice-capable system including a security 
interface for authenticating a user to the voice-capable system, the method 
comprising:receiving a request from a user computationally... 

17/3.K/3 (Item 2 from file: 350) Links 
Fulltext available through: Order File History 
Derwent WPIX 

(c) 2008 The Thomson Corporation. All rights reserved. 

0016559532 & & Drawing available 
WPI Acc no: 2007-274470/200727 
XRPX Acc No: N2007-204146 

Universal security management system for e.g. mobile communication network, has 
function entities in divided security domains of network, where each domain includes 
gateway adapting interface of entities to universal interface 
Patent Assignee: HUAWEI TECHNOLOGIES CO LTD (HUAW-N) 
Inventor: YANG B; YANG BO 5 H A 



Patent Family ( 4 patents, 1 15 & countries ) 



Patent Number 


Kind 


Date 


Application 
Number 


Kind 


Date 


Update 


Type 


EP 1746764 


A2 


20070124 


EP 200615237 


A 


20060721 


200727 


B 


US 20070022470 


Al 


20070125 


US 2006489932 


A 


20060720 


200727 


E 


WO 2007009350 


Al 


20070125 


WO 2006CN1623 


A 


20060710 


200727 


E 


CN 1889452 


A 


20070103 


CN 200510036123 


A 


20050721 


200731 


E 



Priority Applications (no., kind, date): CN 200510036123 A 20050721 



52 



Patent Details 



Patent Number 


Kind 


Lan 


Pgs 


Draw 


'iling Notes 


EP 1746764 


A2 


EN 


17 


8 




Regional Designated 
States, Original 


AL AT BA BE BG CH CY CZ DE DK EE ES FI FR 
GB GR HR HU IE IS IT LI LT LU LV MC MK NL 
PL PT RO SE SI SK TR YU 




WO 2007009350 


Al feH 



Alerting Abstract ...210) of the entities to a universal security management interface 
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Alerting Abstract ... ADVANTAGE - Maintains proper user-to-data associations across 
multiple devices by a simplified and minimal user interface that permits user to easily 
authenticate other members of a shared space and to encrypt information. Disallows 
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Authorization and security management system for computer implemented system, 
determines whether operation requested by user is valid based... Original 
Titles:Authorization and security management system and method Alerting Abstract 
DESCRIPTION - An INDEPENDENT CLAIM is also included for authorization and 

security management method USE - For authorization and security management of 
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to the security server and provides control signals for interacting with secure resource. 
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User identity authentication program storage device for computer, involves establishing 
security process, enabling authentication procedure on computer and storing secure 
user acknowledgement Original Publication Data by Authority.. .Original 
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Secure shell protocol access method for networked computer system, involves providing 
security policy approval for logical channel allocation by comparing access control 
permissions with cached session key ...a user ID to privileges, is associated with the cached 
session key and ID. A security policy approval is provided to authenticated client requesting 
logical channel allocation, by comparing access control policy repository... Original 
Publication Data by AuthorityOriginal Abstracts: An enhanced Secure Shell (SSH) protocol 
having fine-grained access security policy management and enforcement. Via an 
authorization application programming interface (aznAPI), remote user protocol 
connections and sessions may be added to the protected object space of a policy 

management system resources once authenticated, the user is granted permission to 

access only the system resources allowed in the security policy or policies Secure Shell 

(SSH) protocol having fine-grained access security policy management and enforcement. Via 
an authorization application programming interface (aznAPI), remote user protocol 

connections and sessions may be added to the protected object and access to system 

resources once authenticated, the user is granted permission to access only the system 
resources allowed in the security policy or policies. ...Claims: of privileges;associating said 
credentials with said cached session key and ID; andperforming a security policy approval 
responsive to a request allocation of a logical channel, said approval considering 
permissions set in said access control policy repository in comparison to said cached session 

key, ID and associated credentials fine-grained privileges;catching and associating said 

credentials with said session key; andperforming a security policy approval responsive to a 
Secured Shell logical channel allocation request, said approval considering permissions set in 
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Alerting Abstract ...ADVANTAGE - Provides to the user a user interface which allows 
him to access the LAN resources in a flexible way... Original Publication Data by 
Authority. ..Original Abstracts:drive servers and more than one email servers. The 
architecture provides to the user a user interface which allows him to access its ressources 
in a flexible way. ...Claims: connected to said WAN, authenticating a local user and 
providing an owner authentication signal; a shared database, said shared database 
comprising said shared data; a permission database, the permission database comprising a 
relation between at least one user identification, at least one part of said data and said 
permission rights; a shared access authentication unit, connected to said WAN, the shared 
access authentication unit authenticating a non local user using said permission database 
and providing a shared access authentication signal; a database manager, connected to at 
least said owner authentication unit, to said shared access authentication unit, to said 
permission database and to said shared database, the database manager, receiving a request 
from a user and providing an access with permission right to at least one part of said shared 
data of said shared database with said permission rights if an owner authentication signal or 
if a shared access authentication signal is received. 
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has peer devices, one with programmable controller and program storage, and peer 
server 
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...NOVELTY - The system includes several peer devices, each with a user interface and a 
network interface for enabling communications over a data network. A peer server, coupled... 
Original Publication Data by Authority.. .Original Abstracts:to-peer communications. The 
hybrid architecture allows centralized administration and policy management of 
authentication, obstacle transversal and security methods, to ensure the overall system 

integrity required by business systems. Typical peer user devices communications. The 

hybrid architecture allows centralized administration and policy management of 
authentication, obstacle transversal and security methods, to ensure the overall system 
integrity required by business systems. Typical peer user devices implement peer client 

programming, for signaling communication with the server and for peer-to Claims: via a 

data network, comprising: a plurality of peer devices, each peer device having a user 
interface and a network interface for enabling communications over the data network ;a peer 
server, coupled for data communication via the data network, for providing session 
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Network information handling system for client server environment, includes server 

application with user interface running on server, having shared access data tier, client 

and server application code tier 
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Network information handling system for client server environment, includes server 
application with user interface running on server, having shared access data tier, client 
and server application code tier Alerting Abstract ...NOVELTY - A server application 
comprising user interface running on a server. The application has client application code 

tier (310) for initiating processing interface which allows the user of the server 

application to customize or create their own user interface. Readily adaptable to internal 
charge back rather than payment... Original Publication Data by Authority. ..Original 
Abstracts:to access the server computer system. The system further includes a server 
application comprising a user interface running on the server computer system and having a 

multi-tier architecture. The multi-tier architecture includes a first to allow a user, such as 

a system administrator or the like, to customize the user interface. In a further aspect, a 
aspect, a method of customizing a server application is also provided. ...Claims:plurality of 
users to access the server computer system; and a server application comprising a user 
interface running on the server computer system, the server application having a multi-tier 
architecture comprising a first tier of client application code for initiating processing by the 
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server application in a third tier of shared access and data code; an application 

programming interface configured to allow customization of the user interface 

requisition for the verified user requested print on demand items ;a server application 
comprising a user interface running on the server computer system, the server application 

having a multi-tier architecture comprising to input by a user of the client computer 

system, a middle tier of object-oriented server application code, and a third tier of shared 
access and data code; andan application programming interface configured to allow 
customization of the user inter face,wherein the customizable system is configured to allow a 
first user to access a first 
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Alerting Abstract ... medium stored with financial transaction facilitating provision 
program;Financial transaction monitoring and managing system;Graphical user interface for 
managing transactionsOriginal Publication Data by Authority. ..Original 
Abstracts: automatically calculates all required payments, arranges for the electronic transfer 
of funds upon input by the participants of final authorization, accompanied by digital 
verification, and creates audit records of the final transaction details... 
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Original Publication Data by Authority.. .Original Abstracts: a PC card, and IC card or a 
Smart Card having a contact sensitive graphical user interface (40). The token (24) captures 
through the interface (40) a template associated with a user's ideogram signature 

information The template is then compared with subsequent inputs of this ideogram 

signature information from the user and verified to enable the cryptographic token to 
function with the security module (22). The cryptographic token (24) may have either an 

independent power source permitting the token device (24) which must be enabled by a 

user and temporarily connected with the security module (22) to permit the use of the user 
information... 
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Automated financial instrument processing system e.g. for money orders in financial 

establishment - includes security processor which restricts access to printer for printing 

financial instrument after confirming identity of user and selected printer 
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Alerting Abstract ...A security processor restricts access to selected functions after 
confirming identity of the user. The security processor compares unique identifier 
associated with a specific printer and a stored identifier to confirm... Original Publication 
Data by Authority.. .Original Abstracts: allow for the configuration and customization of the 
execution control processor (10) and a graphical user interface (18). A communications 
processor (20) is provided to establish network connection with a host computer. Context- 
sensitive help is... Claims: A data processing system operable to process financial 
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instruments, comprising:a graphical user interface operable to present a plurality of options 

to a user of the system;a data base processor operable to of the system prior to allowing 

access to the printer for printing the financial instruments, the security processor being 
further operable to compare a unique identifier associated with a particular printer, to... 
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Alerting Abstract ...The source machine also includes a security system with a user 
interface module (16), and a security module (17) which allows the production and 
verification of digital signatures. The operator of the source terminal is able... Original 
Publication Data by AuthorityOriginal Abstracts: The invention relates to an apparatus for 
secure facsimile transmission comprising: - a user interface (16) making it possible to set up 
a dialogue with the latter; - a security module (17) allowing production and verification of 

digital signatures, and combating reproduction. The invention also relates to a secure a 

secured telecopier or fax unit having such a security device. The device incorporating a user 
interface (16) permitting the establishment of a dialogue therewith and a security module 
(17) permitting the production and checking of digital signatures and preventing replay. 

The invention also relates to a fax unit including Claims: 1. Device for rendering secure 

the transmission of faxes comprising a user interface (16) making it possible to establish a 
dialogue therewith, characterized in that it comprises a security module (17) making it 
possible to detect replays, prevent a retransmission of a document to the same recipient 

without the reader individual to the user and in which are stored: - a first secret element 

which is a confidential code enabling the card to authenticate its legitimate owner, - a 

second secret element (SA) enabling the card of the transmitter to calculate a We claim: 

Device for rendering secure the transmission of faxes comprising a user interface and a 

security module, said security module being operable to generate and check a plurality 

signatures including an operator digital signature and a transmission date and time digital 
signature, said security module including means for authenticating the operator, means for 
verifying transmission and reception, and means for... 
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End-to-end communication establishing method, involves generating shared symmetric 
key set during the security transaction, and assigning key to communications channel 
accessible to security token 
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Alerting Abstract ... ADVANTAGE - The method provides efficient end-to-end 
communication connection for securely exchange information between the security token 
and computer system. The communication channel is provided to prevent concurrent 
wireless connection from being established with the security tokens... Original Publication 
Data by Authority.. .Original Abstracts:PKI key pair (210, 210') associated with the 
cryptographic module (75). The secure communications pathway allows presentation of 
critical security parameter (CSP) without clear text disclosure of the CSP and further allows 

use of the generated session keys as implementation over a wireless connection. The 

invention allows the securely exchange of information between a security token enabled 
computer system and an intelligent remote device having an operatively coupled security 

token thereto anonymous secure messaging channel between the security token and the 

security token enabled computer system, which allows the intelligent remote device to 
emulate a locally connected security token peripheral device without requiring a physical 

connection. A dedicated wireless communications channel is incorporated Claims: to a 

dedicated communications channel accessible to said security token, andd. performing a 
second security transaction which authenticates a user to said security token. 
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Funds transferring method for vending machines, involves receiving authorization to 
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Authority.. .Original Abstracts:example, a prepaid cash card can visit one of the value 
exchange machines, select the desired transaction, and pay for the card with coins, 

currency, a credit card, a debit card, and a prepaid cash card can visit one of the value 

exchange machines, select the desired transaction, and pay for the card with coins, currency, 
a credit card, a debit card, and/or bank account funds. After confirming payment, the value 
exchange machine dispenses the card to the user bank account funds. After confirming 
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payment, the value exchange machine dispenses the certificate to the user, who can then go 
on-line to make purchases from an associated retailer with the certificate. ..Claims: to the 
second user, an electronic address of the second user, and a source of funds;receiving an 

authorization to debit the source of funds for the amount of funds; andin response to 

message to the electronic address of the second user to inform the second user of the amount 
of funds that has been authorized for transfer to the second user. 
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Alerting Abstract ... personal credit information, by completely separating consumers from 
distributors. Reduces logistics and delivery costs of commodities. Even allows consumer to 
purchase commodities from shopping malls linked to local electronic commerce server, 
without requiring consumer to repeatedly register at server as member. Need not require user 
to search through internet shopping malls. Enables consumer to confirm whether his/her 
orders are received, as well as reliably transact for commodities sold by familiar transaction 
partners within local area. Promotes purchase desires of consumer. Improves service... 
Original Publication Data by Authority.. .Original Abstracts:distributors' terminal and settles 
payment of the fees of the order commodities. The consumer ultimately exchanges the 
transaction receipt with the commodities. The invention enables ordinary consumers who 
are not familiar with the internet or computers to... 
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funds received at the transaction node in exchange of goods services. Original Publication 
Data by AuthorityOriginal Abstracts: A system for transmitting and recording the transfer of 
electronic funds to a payment acceptor includes a personal data unit (8) and transaction 

node (5). The personal data unit (8) includes a microprocessor (20 receiving a signal 

from the data transmitter (26), the node receiver signals receipt of electronic funds to the 
payment acceptor which in turn, debits of credits the electronic funds received in exchange 

for goods or services. In an optional transaction and information database for tracking 

transactions and, optionally, storing identity validation data (28) to verify the identity of 
users transacting electronic funds. A transaction hub (1 1) is optionally used to exchange 
electronic funds for cash or credit... 
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includes... Claims: We claim: 1. A commodity trading system for allowing commodity 
trading between a first and a second customer, wherein each commodity has a variable 

exchange rate, said system comprising:a first data a commodity being held by a 

custodian facility on behalf of said first customer;an exchange server being in 
communication with said first data base and to said first customer and receiving an order for 
sale of said security, said exchange server being arranged to confirm that said first customer 
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perceived security items, was presented to the users. The VSSQ was presented to the 
participants to validate these perceived security items. The VSSQ had a Cronbach's alpha 
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...is applied to IP network system based on Softswitch, comprises following steps, step one, 
set user terminal authentication security parameter group on user terminal, set broadband 
access gateway authentication security parameter group on broadband access gateway, set 
user terminal authorization security parameter group which is corresponding to user 
terminal authentication security parameter group and broadband access gateway 
authorization security parameter group which is corresponding to broadband access 
gateway authentication security parameter group on security authentication server; step two, 
access user terminal to Softswitch kernel control device through broadband access gateway; 
step three, user terminal system processing authentication; broadband access gateway 
processing security protection to message between user terminal and Softswitch kernel 
control device according to broadband access... 
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where this type of recovery is not workable, techniques for authenticating a user may be 
used, allowing the authenticated user to bypass the security features of the boot process 
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Alerting Abstract ...established between an intelligent remote device, and security token 
enabled computer system. A critical security parameter associated with a user is provided to 

a security token operatively coupled to the intelligent remote ADVANTAGE - Allows 

the intelligent remote device to emulate a local security device peripheral connected to the 
computer system... Original Publication Data by Authority.. .Original Abstracts: device. 
Additionally, various secure communications connections mechanisms are described which 
are intended to augment existing security protocols available using wireless network 
equipment. Authentication of a user supplied critical security parameter is performed by 
the security token. The critical security parameter may be provided locally via the intelligent 

remote device or device. Additionally, various secure communications connections 

mechanisms are described which are intended to augment existing security protocols 
available using wireless network equipment. Authentication of a user supplied critical 
security parameter is performed by the security token. The critical security parameter may 
be provided locally via the intelligent remote device or received from the wireless network 
and routed to the security token. Aural, visual or vibratory feedback may be provided to the 
user to signal a successful authentication transaction. ...Claims: intelligent remote device 
and a security token enabled computer system,b. providing a critical security parameter 
associated with a user to a security token operatively coupled to said intelligent remote 

device, andc. authenticating said critical security parameter by said security least an 

intelligent remote device and a security token enabled computer system,b. providing a 
critical security parameter associated with a user to a security token operatively coupled to 
said intelligent remote device, andc. authenticating said critical security parameter by said 
security token. 
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Distributed application user protection method e.g. for web application user, involves 
associating security value with set of commands of distributed application Original 
Publication Data by Authority.. .Original Abstracts:the server, and then sent to the user 
along with session information. Thereafter, the security value is associated with a set (e.g., 

one or more) of commands of the distributed application. When thereto is checked for 

the security value. If the value is present, the command is permitted. However, if the 
security value is not present, the command is not permitted and an error message is 

returned Claims:protecting a distributed application user, comprisingproviding a 

distributed application on a server;determining a security value for an authenticated user of 
the distributed application;associating the security value with a set of commands of the 
distributed application;receiving one of the set of commands on the server from the 
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Alerting Abstract ... authentication system by minimizing network connection times during 
authentication and update periods. The system provides acceptable levels of security at a 
reasonable cost and permits computer users with rudimentary skill levels to manage a web 
site owner's authentication parameters in a secure manner... Original Publication Data by 
Authority.. .Claims: generation module linked to the end-user table generation module that 
generates and manages authentication parameters of end-users off-line to permit the end- 
users access to the Web site owner's... 
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Alerting Abstract ...biometric information based on retrieved authentication profile with the 
received biometric information based on the authentication profile. If the user is not found 
authentic a security policy revokes the user's access privileges or causes a successful login 

attempt, while authorities authentication at a server, thereby enhancing computer 

network security. The authentication policy is flexible and allows the biometric 
authentication to be implemented at any computer or location within the network to be... 
Original Publication Data by Authority.. .Original Abstracts:de correspondance biometrique 
sur la base de l'emplacement de l'ordinateur, de l'heure et d'autres conditions de securite. Si 
l'utilisateur ne correspond pas a la personne autorisee, une politique de... 
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...e.g. cable modem, has unit for detecting security of incoming message from central 
remote security and allowing message write access to protected register, only when 
security is verified ...register (104). A unit detects the security of an incoming message from 
a central remote security and allows the message write access to the protected register. 
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Original Publication Data by Authority.. .Claims: is claimed is: 1. A secure remote access 
system, comprising:a first non protected storage element associated with a first end-user 
device;a second, protected storage element that stores protected information, also associated 

with said first end-user device;a data transfer element; anda security element, detecting 

security of an incoming message from a central remote authority, which his remote from the 
end-user device, and allowing said incoming message write access to said second protected 
storage element, only when security is verified by said data transfer mechanism wherein 
said security element includes a digital signature verifying element, which operates both on 
incoming data and on a digital signature associated with said incoming data, to verify that 
said incoming data is associated with said digital signature. 
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Alerting Abstract ... the attributes which define the type of security object is encapsulated 
with the security object data, the user is allowed to define the security object without 
limitations, irrespective of the server application. Provides greater freedom for defining the 
security content and level of security. Deciphering of object... Original Publication Data by 
Authority.. .Claims: for use in securing an item, comprising: receiving security object data; 
setting one or more attributes associated with the security object data, wherein the one or 
more attributes include a user designation of a security object type; and encapsulating the 

security object data and the What is claimed is: 1. A computer-implemented method of 

generating a security object for use in authenticating a user to access an item, comprising 



computer-implemented steps of: receiving security object data;setting one or more attributes 
associated with the security object data, wherein the one or more attributes include a user 
designation of a security object type; andencapsulating, within the security object, the 
security object data and the one or more attributes with one or more methods, wherein the 
security object is used to authenticate the user by validating an identity of the user using 
at least one of the one or more methods encapsulated within the security object. 

21/3.K/11 (Item 10 from file: 350) Links 

Fulltext available through: Order File History 
Derwent WPIX 

(c) 2008 The Thomson Corporation. All rights reserved. 

0013228692 & & Drawing available 
WPI Acc no: 2003-313549/200330 

Related WPI Acc No: 2003-219717; 2003-220107; 2004-410061 
XRPX Acc No: N2003-249613 

Video security system for monitoring premises remotely in which remote authorized 
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Video security system for monitoring premises remotely in which remote authorized 
users can access security features such as changing passwords, setting permissions, etc. 
without going through central server ...NOVELTY - The security system verifies remote 
users (155) and allows them to access their personal account settings to add new users, set... 
Original Publication Data by Authority.. .Original Abstracts: alarm condition in a security 
system. A security gateway detects alarm conditions at a premises and records video relating 
to the alarm condition. The security gateway transmits an alarm notification and the video 

across a network to a security system server in a security system. A security gateway 

detects alarm conditions at a premises and records video relating to the alarm condition. 
The security gateway transmits an alarm notification and the video across a network to a 

security system server in substantially real time. The security A system and method for 

remote monitoring of a premises. The security system (fig. 1) verifies remote users and 
allow authorized remote (131 of fig. 1) to access features of the security system located at 
the premises without the need for communication to pass through a central server (120 of... 
...Claims: to detect an alarm condition and to record video of at least a portion of the 
premises relating to the alarm condition, said video hereinafter referred to the Alarm 
Video;a security system server operatively coupled to the security gateway, wherein the 
security gateway is configured to transfer to the security system server a notification of the 
alarm condition and the corresponding Alarm Video to the security system server in 
substantially real time;a plurality of monitoring clients operatively coupled to the security 

system server;wherein the security system server wherein said designated monitoring 

clients are configured to notify the security system server whether the notification of the 

alarm condition corresponds to an actual alarm condition an alarm condition and to 

record video of at least a portion of the premises relating to the alarm condition, said video 
hereinafter referred to as the Alarm Video ;a security system server operatively coupled to the 
security gateway, wherein the security gateway is configured to transfer to the security 
system server a notification of the alarm condition and the corresponding Alarm Video in 
substantially real time;a plurality of monitoring clients operatively coupled to the security 
system server;the security system server utilizing rules-based routing to select, based upon a 
predefined set of one or more rules, one or more of the plurality of monitoring clients, 

hereafter referred clients are configured to notify the security system server whether the 

notification of the alarm condition corresponds to an actual alarm condition. 
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Original Publication Data by Authority.. .Original Abstracts:locate process parameters 
within proprietary recipe-file formats. The sequence of parameters in the R-DOM file 
matches the sequence in the recipe data file so that parameters may be mapped from recipe 
data files for display and editing. ASCII or binary recipe file formats are mapped from the 

recipe parameters within proprietary recipe-file formats. The sequence of parameters in 

the R-DOM file matches the sequence in the recipe data file so that parameter may be 
mapped from recipe data files for display and editing. ASCII or binary recipe file formats 

are mapped from the recipe data file using R-DOM Claims: generating a visual display of 

values of the process parameters to a user;a behavioral component coupled to the data- 
presentation component, including:file-validator means for validating access to a recipe data 

file by model (R-DOM) file specific to the fab equipment controlled by the recipe data 

file;parameter -display means, coupled to receive a process parameter from the parameter- 
read means, for sending the process parameter to the display component for display to the 

user;parameter-security means, activated when the user requests to the selected process 

parameter, for displaying a dialog box on with the display component, the dialog box 
allowing the user to select a new value for the selected process parameter ;parameter- verify 

means DOM) file specific to the piece of fabrication equipment controlled by the recipe 

data file parameter -display means, coupled to the parameter -read means to receive a 

process parameter from the parameter-read means, for sending the to modify a selected 

process parameter, for reading a security indicator for the selected process parameter from 
the R-DOM file, the security indicator indicating when user has a security level sufficient to 
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modify the selected process display component, the dialog box allowing the user to 

select a new value for the selected process parameter ;parameter-verify means, activated by 
the parameter-edit means when the user selects a new value, for validating that the new value 
is... 
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Alerting Abstract ...user request along with security cookie value and filtered in response to 
the user credentials associated with the cookie value and label structures included in HTML 
file. ...system is installed only at the web server and enhances browser and server functions 
by allowing different security policies, imbedding of security labels and alteration of 
passwords and credentials... Original Publication Data by Authority. ..Claims:web cookie as a 
security cookie in said mapping,creating a set of said credentials by prompting a user for 
authentication information, validating said authenication information against user 

information retrieved from said CGI accessible registry storage in response of a stored 

HTML file that was not accompanied by a web cookie name and value contained within said 
mapping,retrieving said stored HTML file in response to a request from a user accompanied 
by said security cookie value, filtering said stored HTML file in accordance with said user 
credentials associated with said security cookie value to form filtered information in 
accordance with said HTML label structures, andreturning creating a set of said 
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credentials by prompting a user for authentication information, validating said 
authentication information against user information retrieved from said CGI accessible 

registry storage, performed in response to a request for retrieval of a stored constructs 

embedded in the HTML file in accordance with a comparison to said user credentials 
associated with said security cookie value to form filtered information in the form of stand 
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Original Publication Data by Authority.. .Original Abstracts: services and a request for user 
account information, a storage device that stores an account value linked to the personal 
identification number, a ... services and a request for user account information, a storage 
device that stores an account value linked to the personal identification number, a 
verification module that authenticates the personal identification ... one settlement rule. If it is 
determined that the authorized user does not have sufficient funds in an authorized user 
account to debit for the transaction, the authorized user account may be recharged by... 
...Claims: networks, comprising: sending a request message to the user at a receiver that the 
pre-authorized account needs additional funds;receiving a response message from the user 
using the receiver requesting additional funds be added is associated with the pre- 
authorized account and identifying another account from which the additional funds are to be 
drawn; andafter authentication that the user is associated with the pre-authorized account, 
obtaining the additional funds in a real-time transaction debiting the other account and adding 
the additional funds to the pre-authorized account used in paying for at least one 
communication service or transaction, provided or consummated, respectively via at lea... 
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Alerting Abstract ...added terminal (12) responds to authorization code input by the 
customer, by adding a cash value associated with input code onto a smart card (16) and 
deactivating the input code to prevent subsequent cash value transfer corresponding to the 
same code. DESCRIPTION - The central server has a storage device having a number of 
active authorization codes associated with cash values. The value added terminal includes 
on-board secure memory for storing the authorization code and... Original Publication Data 
by Authority.. .Original Abstracts:and to add cash value to the cards upon customer (18) 
input of an appropriate authorization code (22). The money-activated machine (14) is 
designed to read smart cards, and reprogram them by deducting a cash value amount 
corresponding to the customer's use of the machines. The central server apparatus (10) 
receives calls from customers requesting an authorization code for use with a value added 
terminal, and in response thereto, verifies funds in a pre-established customer account and 
provides an active authorization code. ...Claims:having a storage device with a plurality of 
active authorization codes each having a cash value associated therewith,a value added 
terminal remote to the central server apparatus and including on-board secure memory 
storing the authorization codes and associated cash values of the central server apparatus 
and an input device responsive to customer input of the authorization code associated with 

the customer to add cash value onto the smart card in an amount equal to the cash value 

associated with the inputted authorization code and deactivate the inputted authorization 

code so that subsequent input of the deactivated authorization code will not cause 

requested cash value transfer, which authorization code the central server apparatus provides 
upon verifying the availability of funds in the customer's account, and the customer can 
then input the authorization code into the input device of the, value added terminal, 
whereafter the value added terminal adds the cash value associated with the inputted 
authorization card onto the smart card and dispenses the programmed smart card to the 
customer, whereafter the customer can use the smart... 
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Original Publication Data by AuthorityOriginal Abstracts: A system (100) and method of 
improving activation security allows a remote device (104) to identify that there is a 

difference between a first signal transmitted by a central used internally of the remote 

device, or the central site, for verification that is transparent to the user. A significant amount 

of security is added without substantially altering the communication protocol A system 

(100) and method of improving activation security allows a remote device (104) to identify 

that there is a difference between a first signal transmitted by a central site internally of 

the remote device, or the central site, for verification that is transparent to the user. A 
significant amount of security is added without substantially altering the communication 
protocol. ...Claims:unique signal do not have the set relationship. The derived signal is 
generated from a number of different protocol parameters. 
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Alerting Abstract ...are generated has a memory. The memory stores information relating to 
alterable tone pair characteristic values and associates each of the alterable tone pair signal 

characteristic values with a data item. A circuit a DTMF signal. The information relates 

to the alterable characteristic values includes tone pair duration values. The information 
relating to the alterable characteristic values includes aggregate tone pair signal power 
levels... Original Publication Data by Authority.. .Original Abstracts:a system clock used to 
drive a pseudo random number generator used in various data security schemes. Calibration 
features permit the calibration of the audio output and system clock with adjustments being 

made via the acoustic programming of the auto-dialer with various calibration of a 

security device and unauthorized access to a resource. The method includes requesting an 
authorized user of a security device to select a set of N PINs and N distinct phrases, each 
one of the N distinct phrases being associated with a corresponding one of the N PINs for 

acting as a prompt prompt is compared to the associated PIN to determine whether the 

current user of the security device is the authorized user. The current user is granted access 
to the resource or is granted use of the security device if it is determined that the current 
user of the security device is the authorized user. ... a system clock used to drive a pseudo 
random number generator used in various data security schemes. Calibration features permit 
the calibration of the audio output and system clock with adjustments being made via the 

acoustic programming of the auto-dialer with various calibration factors Claims: are 

generated has a memory. The memory stores information relating to alterable tone pair 
characteristic values and associates each of the alterable tone pair signal characteristic values 

with a data item. A circuit a DTMF signal. The information relates to the alterable 

characteristic values includes tone pair duration values. The information relating to the 
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alterable characteristic values includes aggregate tone pair signal power levels an 

interdigit period, the device including: 

memory storing encoding information relating to alterable tone characteristic values and 
storing corresponding data items; and 

an encoding generator electrically coupled to said memory, said encoding generator 

generating a set of tones encoded with said alterable tone security method for controlling 

unauthorized access to a resource, comprising the steps of requesting an authorized user of a 
security device to select a set of N PINs and N distinct phrases, each one of the N distinct 
phrases including at least one word, each one of the N distinct phrases being associated with 

a corresponding one of the N PINs for identifying the corresponding one N distinct 

phrases selecting, by the verification service, a first one of the N PINs;prompting, by the 
verification service, a current user of the security device for a first time using the one of the 

N distinct phrases associated with the N PINs as a first prompt;receiving at the 

verification service a first response to the first prompt from the current user ;determining at 
the verification service, as a function of the first response, whether the current user of the 
security device is the authorized user, wherein the step of determining includes the step of 

comparing the first response to the N PINs to determine if there is a match; andgranting, 

to the current user by the verification service, access to a resource if it is determined that the 

current user of the security device is the authorized user An auto-dialer housing, 

comprising: a generally saucer shaped head assembly adapted for 
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Alerting Abstract ...whether the firing mechanism is operable or not. A disabling unit 
comprising a solenoid is connected to a blocking element movable by the solenoid to stop 
the grip safety from moving into the operable position... Original Publication Data by 
Authority.. .Original Abstracts:firearm. The firearm will remain in a disabled state unless a 
verification means determines that a firearm user is an authorized firearm user. The security 
and safety mechanism utilizes voice recognition technology in order to ascertain whether a 

firearm user is an authorized firearm Claims:position thereby permitting said firing 

mechanism to operate; a disabling unit comprising solenoid means operably connected to a 
blocking element, said blocking element movable by said solenoid means between a 
blocking position whereby said blocking element blocks... 
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